$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2C8A4BD0E3A311EA849FE735C4F9AE02.roa File: 2C8A4BD0E3A311EA849FE735C4F9AE02.roa (raw, json) Hash identifier: vkhtSn0YxiUX8dOgammxIROGU951f6iPWxoQYwQib0U= Subject key identifier: 4C:83:80:4D:66:9B:04:2C:61:87:5C:C6:7B:17:95:47:80:06:5F:8B Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EF88 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2C8A4BD0E3A311EA849FE735C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:43:36 +0000 ROA not before: Mon 06 Jul 2026 16:43:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134903 IP address blocks: 103.210.140.0/22 maxlen: 24 2405:afc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61320 (0xef88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:43:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bdb38-f4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:41:eb:57:19:e7:67:b4:55:f9:85:57:b6:c8: dc:3d:99:7b:27:46:00:2f:78:40:54:94:5b:40:04: e3:60:49:42:2e:93:56:b9:3e:17:76:3c:32:9a:39: ee:e8:3e:37:8f:34:18:48:95:f0:73:3e:97:fb:47: 86:e2:e7:9d:b3:d7:d8:87:34:0f:eb:f6:04:87:01: 80:5c:00:f8:10:e9:d0:56:c2:77:ce:7e:ec:6a:8d: de:a8:09:4a:8a:12:cc:80:5f:99:c6:70:f6:63:d0: 49:ed:dc:c4:1f:79:59:62:e8:d2:0d:f5:ee:a2:f5: 89:a9:4c:60:fe:a5:ea:c5:7c:a8:b9:43:e8:a2:e0: b7:e4:f7:b6:d4:32:13:e4:d5:3e:f5:a4:44:0c:2a: 86:22:c1:7c:db:fd:92:f2:ab:7c:32:21:8a:fe:4c: 11:23:20:4d:cc:37:93:e1:45:95:63:9b:3f:21:26: 5a:aa:b3:df:81:cd:48:c2:b4:0e:7d:49:fd:a7:5e: 94:f6:33:1d:f7:01:c7:f1:ac:6c:c4:d7:39:b6:9f: e0:ec:d5:93:37:95:cd:92:23:4d:a6:52:fd:2a:26: a8:6a:67:de:e3:27:0d:16:b6:d8:aa:d6:b9:79:85: 36:75:5f:c8:a0:ff:df:c4:86:bc:9e:f0:17:86:e9: bc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:83:80:4D:66:9B:04:2C:61:87:5C:C6:7B:17:95:47:80:06:5F:8B X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2C8A4BD0E3A311EA849FE735C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.210.140.0/22 IPv6: 2405:afc0::/32 Signature Algorithm: sha256WithRSAEncryption 17:7e:b8:c5:23:3c:81:4f:f3:89:a0:ca:bf:4c:ad:00:cf:4e: 16:bb:4d:f1:6c:ce:9c:ad:45:31:6d:10:30:6f:e8:41:4b:e2: 3d:b4:b6:53:6a:2d:3f:0d:ec:2e:32:81:c0:14:4d:70:6c:f4: 4a:bc:12:ed:1d:22:7c:08:cd:f3:53:66:1e:37:7d:86:41:ea: fc:d1:b3:95:00:63:91:f1:6c:14:46:73:f7:76:b6:dd:db:5a: 94:9f:b8:20:85:1f:10:cd:24:58:2c:0b:04:b8:28:d1:0c:68: 69:ce:df:8c:a5:df:95:54:9d:c0:4c:64:7c:b3:b1:63:0c:23: 76:f7:1c:67:ca:63:8b:6a:9d:a1:c9:b3:9d:05:eb:85:68:c5: dc:3e:e5:db:42:84:62:b9:2d:8b:d5:1a:cc:3c:b5:57:92:fb: 67:41:4c:64:57:92:de:6c:4c:a6:55:b8:08:66:a7:bc:bc:1a: e5:8e:cb:2f:6a:85:9a:17:73:a3:24:a0:22:f2:67:10:c2:38: 6b:14:98:1b:c0:ab:18:06:dd:a6:97:3f:26:26:bd:f5:f4:27: ff:2c:9b:ef:e2:6f:4f:c3:5a:6c:80:9b:f2:c4:bc:b6:77:98: 33:8f:8f:f1:46:2f:4a:63:b6:00:30:49:ff:3e:e4:9d:06:52: b9:1c:28:dc -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIDAO+IMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2NDMzNloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRiMzgtZjRhNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANBB61cZ52e0VfmFV7bI3D2ZeydGAC94QFSUW0AE42BJQi6TVrk+F3Y8Mpo5 7ug+N480GEiV8HM+l/tHhuLnnbPX2Ic0D+v2BIcBgFwA+BDp0FbCd85+7GqN3qgJ SooSzIBfmcZw9mPQSe3cxB95WWLo0g317qL1ialMYP6l6sV8qLlD6KLgt+T3ttQy E+TVPvWkRAwqhiLBfNv9kvKrfDIhiv5MESMgTcw3k+FFlWObPyEmWqqz34HNSMK0 Dn1J/adelPYzHfcBx/GsbMTXObaf4OzVkzeVzZIjTaZS/SomqGpn3uMnDRa22KrW uXmFNnVfyKD/38SGvJ7wF4bpvLkCAwEAAaOCAm8wggJrMB0GA1UdDgQWBBRMg4BN ZpsELGGHXMZ7F5VHgAZfizAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzJDOEE0QkQw RTNBMzExRUE4NDlGRTczNUM0RjlBRTAyLnJvYTAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAmfSjDANBAIAAjAHAwUAJAWvwDANBgkqhkiG9w0BAQsFAAOCAQEA F364xSM8gU/ziaDKv0ytAM9OFrtN8WzOnK1FMW0QMG/oQUviPbS2U2otPw3sLjKB wBRNcGz0SrwS7R0ifAjN81NmHjd9hkHq/NGzlQBjkfFsFEZz93a23dtalJ+4IIUf EM0kWCwLBLgo0Qxoac7fjKXflVSdwExkfLOxYwwjdvccZ8pji2qdocmznQXrhWjF 3D7l20KEYrkti9UazDy1V5L7Z0FMZFeS3mxMplW4CGanvLwa5Y7LL2qFmhdzoySg IvJnEMI4axSYG8CrGAbdppc/Jia99fQn/yyb7+JvT8NabICb8sS8tneYM4+P8UYv SmO2ADBJ/z7knQZSuRwo3A== -----END CERTIFICATE-----Generated at Tue Jul 21 11:14:23 2026 by rpki-client